CVE-2022-47111 LOW

CVE-2022-47111

Vendor 7-Zip

Product 7-Zip

Weakness CWE-754

Published April 19, 2025

Last update April 21, 2025

View on NVD All CVEs

CVSS base score

2.5/10

Attack vector Local

Attack complexity High

Privileges required None

User interaction Required

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected.

Key dates

02Disclosure timeline

April 19, 2025 CVE published

April 21, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-47111 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/754.html

Related vulnerabilities

04Related CVE

CVE-2024-47499 Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash CVE-2023-45812 Improper Check or Handling of Exceptional Conditions in apollo-router CVE-2022-22194 Junos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE to restart CVE-2025-59958 Junos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the RE CVE-2025-13080 Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005